The vulnerability of the software for interacting with servers via CURL is related to errors in the certificate validation process, which allows attackers to compromise data integrity.

🗓️ 08 Jul 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Curl-based software has certificate validation errors enabling attackers to compromise data integrity via certificate status responses.

Reporter	Title	Published	Views	Family All 169
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2020-8284, CVE-2020-8285, and CVE-2020-8286)	15 Mar 202117:09	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)	4 Jun 202116:40	–	ibm
IBM Security Bulletins	Security Bulletin: cURL libcurl vulnerabilites impacting Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client 4.0 and earlier (CVE-2020-8284, CVE-2020-8286, CVE-2020-8285)	4 Jun 202101:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	3 Dec 202118:52	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (Multiple CVEs)	22 Apr 202212:50	–	ibm
FreeBSD	cURL -- Multiple vulnerabilities	9 Dec 202000:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2021-1693)	6 Aug 202100:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0078: curl (ALINUX3-SA-2021:0078)	14 May 202500:00	–	nessus

Vulners

Node

daniel_stenberg curlRange7.41.0–7.74.0

Source	Link
curl	www.curl.se/docs/CVE-2020-8286.html
github	www.github.com/curl/curl/commit/d9d01672785b8ac04aab1abb6de95fe3072ae199
hackerone	www.hackerone.com/reports/1048457
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8286
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-8286
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16
wiki	www.wiki.astralinux.ru/pages/viewpage.action
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17

27 Mar 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

CVSS 35.3

EPSS0.04575